$ rpki-client -vvvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a2d3638-8f7d-4937-9d28-b6599ec9106d.roa File: 2a2d3638-8f7d-4937-9d28-b6599ec9106d.roa (raw, json) Hash identifier: y3CHaVgaS5597tJwYKZWVbBxzqXU8nngoo9onjQRecM= Subject key identifier: AB:1A:7A:BB:F2:98:AE:8E:E1:BB:61:B3:9A:36:F7:EA:BB:5E:75:E4 Certificate issuer: /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Certificate serial: CA806D49BCDCD6E86C1015726AB4BBF539D45F Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a2d3638-8f7d-4937-9d28-b6599ec9106d.roa Signing time: Thu 22 Oct 2026 02:31:09 +0000 ROA not before: Thu 22 Oct 2026 02:31:09 +0000 ROA not after: Wed 20 Jan 2027 23:59:59 +0000 asID: 16509 IP address blocks: 157.175.16.0/20 maxlen: 20 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 04 Nov 2026 17:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: ca:80:6d:49:bc:dc:d6:e8:6c:10:15:72:6a:b4:bb:f5:39:d4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7 Validity Not Before: Oct 22 02:31:09 2026 GMT Not After : Jan 20 23:59:59 2027 GMT Subject: serialNumber=4b08c82f64f78db6bbb65954da456281db23658b953c4d28d6d36eb2149332a3, CN=b25c970f-d813-445c-bfe2-62668518c87e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:a4:48:73:46:8b:5d:cb:5e:22:b8:6b:8c:44: d0:3e:e4:27:fb:96:02:d4:19:d1:49:17:d9:e3:01: 3e:5e:97:13:36:79:ca:64:9e:2e:ba:d2:85:1b:54: 0d:3d:d9:1d:84:e7:3b:bd:92:a0:eb:d3:de:5d:b9: 03:43:b9:92:13:34:63:52:31:56:fb:61:8a:06:0c: fc:90:da:01:99:c7:d2:41:3f:60:45:b2:37:18:08: 89:1e:28:ef:59:ec:22:52:bc:ff:b0:4f:da:54:ca: 11:b8:c2:bd:23:76:59:6a:b0:9f:f6:7e:6a:25:97: 10:39:2d:aa:fb:02:e1:4a:ce:23:1e:cc:df:ab:d9: 78:72:f7:18:71:9c:c9:29:1d:5c:91:d2:95:e4:15: 1e:53:0d:bc:05:19:72:a4:b6:9c:53:00:1b:91:a6: a6:8c:44:af:fa:65:0a:d0:7d:a9:4d:c1:70:7b:d0: ed:3c:62:ca:2d:6a:8c:28:44:ae:fe:5f:52:d3:0f: 75:a5:0c:4f:b0:ef:99:b9:de:bf:0e:30:b8:32:51: a5:fd:fa:d6:8a:05:2c:80:54:73:ef:ff:00:6b:91: f2:fa:b3:89:c5:60:c9:60:34:8b:9e:c3:71:0f:ae: 3a:f9:72:eb:bf:a8:f6:f4:41:20:0f:25:c6:2c:be: 0b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:7A:BB:F2:98:AE:8E:E1:BB:61:B3:9A:36:F7:EA:BB:5E:75:E4 X509v3 Authority Key Identifier: keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/2a2d3638-8f7d-4937-9d28-b6599ec9106d.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 157.175.16.0/20 Signature Algorithm: sha256WithRSAEncryption 4c:f1:3b:03:31:37:26:e8:61:b0:09:1c:c9:1a:8e:ed:5c:f4: 15:a1:76:6b:eb:0a:ba:e7:ca:63:2f:6f:44:77:55:10:cd:6a: 0d:2a:e4:b0:61:0c:53:e7:34:5e:e5:33:7c:37:b5:74:17:7a: 0a:5b:1c:53:25:36:48:d6:d9:a9:95:25:e3:bd:09:7e:5f:34: df:b6:1b:1e:27:d5:99:87:88:34:85:ec:c1:f3:79:1e:d1:e1: a4:19:73:b1:b0:ef:b7:71:e3:5d:6e:97:de:ee:16:ae:7f:6e: 0a:14:ad:59:42:e4:fd:9c:db:8c:f3:1b:72:e6:c3:f4:88:8c: 35:01:0b:d1:4a:71:2b:6c:c3:c0:1f:2f:54:e5:6f:37:51:a2: 7c:af:30:91:87:a8:4d:27:94:cf:68:7d:40:f0:4f:17:43:fa: 8f:50:f4:09:fe:37:fa:19:2f:36:bc:10:a8:ba:5b:6f:4a:80: 69:ad:7c:33:93:ad:57:4b:6f:ef:d6:8b:87:e4:18:7e:7d:8e: b3:c8:5f:b9:a4:68:77:03:0d:3c:10:49:b1:8b:87:14:47:8e: d7:38:88:51:37:2a:79:bc:da:87:ff:24:c7:43:eb:9c:fd:c7: 1d:aa:ba:ff:bc:bd:cb:45:79:32:a9:db:30:02:ed:4a:42:39: 86:50:fa:5f -----BEGIN CERTIFICATE----- MIIF+DCCBOCgAwIBAgIUAMqAbUm83NbobBAVcmq0u/U51F8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmVkODhjYWQxMWZlYWM3NzQ0OWYwMThkNDJiZTM1OGVi MzcxMDdkYmU4Y2I3MWQwYTcwHhcNMjYxMDIyMDIzMTA5WhcNMjcwMTIwMjM1OTU5 WjB6MUkwRwYDVQQFE0A0YjA4YzgyZjY0Zjc4ZGI2YmJiNjU5NTRkYTQ1NjI4MWRi MjM2NThiOTUzYzRkMjhkNmQzNmViMjE0OTMzMmEzMS0wKwYDVQQDEyRiMjVjOTcw Zi1kODEzLTQ0NWMtYmZlMi02MjY2ODUxOGM4N2UwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCRpEhzRotdy14iuGuMRNA+5Cf7lgLUGdFJF9njAT5elxM2 ecpkni660oUbVA092R2E5zu9kqDr095duQNDuZITNGNSMVb7YYoGDPyQ2gGZx9JB P2BFsjcYCIkeKO9Z7CJSvP+wT9pUyhG4wr0jdllqsJ/2fmollxA5Lar7AuFKziMe zN+r2Xhy9xhxnMkpHVyR0pXkFR5TDbwFGXKktpxTABuRpqaMRK/6ZQrQfalNwXB7 0O08YsotaowoRK7+X1LTD3WlDE+w75m53r8OMLgyUaX9+taKBSyAVHPv/wBrkfL6 s4nFYMlgNIuew3EPrjr5cuu/qPb0QSAPJcYsvgsnAgMBAAGjggKxMIICrTAdBgNV HQ4EFgQUqxp6u/KYro7hu2Gzmjb36rtedeQwHwYDVR0jBBgwFoAUEF3XjVV4QKtD Xb0VISCPKfpJP64wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xYmEzMDJiOC04 ZGFiLTQ5MWQtYjllZC1kN2M5MmQwMzBkODIvNmVkODhjYWQxMWZlYWM3NzQ0OWYw MThkNDJiZTM1OGViMzcxMDdkYmU4Y2I3MWQwYTcuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvMjBhYTMyOWItZmM1Mi00YzYxLWJmNTMtMDk3 MjVjMDQyOTQyLzJhMmQzNjM4LThmN2QtNDkzNy05ZDI4LWI2NTk5ZWM5MTA2ZC5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzIwYWEzMjliLWZjNTItNGM2MS1iZjUz LTA5NzI1YzA0Mjk0Mi9fcXgzUko4QmpVSy1OWTZ6Y1FmYjZNdHgwS2MuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB MAYDBASdrxAwDQYJKoZIhvcNAQELBQADggEBAEzxOwMxNyboYbAJHMkaju1c9BWh dmvrCrrnymMvb0R3VRDNag0q5LBhDFPnNF7lM3w3tXQXegpbHFMlNkjW2amVJeO9 CX5fNN+2Gx4n1ZmHiDSF7MHzeR7R4aQZc7Gw77dx411ul97uFq5/bgoUrVlC5P2c 24zzG3Lmw/SIjDUBC9FKcStsw8AfL1TlbzdRonyvMJGHqE0nlM9ofUDwTxdD+o9Q 9An+N/oZLza8EKi6W29KgGmtfDOTrVdLb+/Wi4fkGH59jrPIX7mkaHcDDTwQSbGL hxRHjtc4iFE3Knm82of/JMdD65z9xx2quv+8vctFeTKp2zAC7UpCOYZQ+l8= -----END CERTIFICATE-----Generated at Mon Nov 2 22:29:24 2026 by rpki-client